Kerio Personal Firewall Fragmented Packet Filter Bypass Vulnerability

Bugtraq ID:	7540
Class:	Configuration Error
CVE:
Remote:	Yes
Local:	No
Published:	May 09 2003 12:00AM
Updated:	May 09 2003 12:00AM
Credit:	This issue was reported by "Curt Wilson" <[email protected]>.
Vulnerable:	Kerio Personal Firewall 2 2.1.4 Kerio Personal Firewall 2 2.1.3 Kerio Personal Firewall 2 2.1.2 Kerio Personal Firewall 2 2.1.1 Kerio Personal Firewall 2 2.1
Not Vulnerable:

Kerio Personal Firewall Fragmented Packet Filter Bypass Vulnerability

Reportedly, a vulnerability exists in KPF that may allow malicious packets to bypass existing firewall rules.

Allegedly, KPF does not properly handle fragmented packets thus a maliciously crafted packet may bypass firewall filters.

Kerio Personal Firewall Fragmented Packet Filter Bypass Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Kerio Personal Firewall Fragmented Packet Filter Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Kerio Personal Firewall Fragmented Packet Filter Bypass Vulnerability

References:

• Kerio Homepage (Kerio)